Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sJR4D_uwa3tX8CFOhFUrlkxQQdY.cer
File: sJR4D_uwa3tX8CFOhFUrlkxQQdY.cer (raw, json)
Hash identifier: DyagJR8aBYXMCej95IcY32qp37bN7biXnNzoHHhGG9E=
Subject key identifier: B0:94:78:0F:FB:B0:6B:7B:57:F0:21:4E:84:55:2B:96:4C:50:41:D6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC86F684E5421A810C2EF7508B3A884DC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 02 Jan 2024 04:29:53 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 9180
IP: 195.214.224.0/21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:68:4e:54:21:a8:10:c2:ef:75:08:b3:a8:84:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 04:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b094780ffbb06b7b57f0214e84552b964c5041d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a6:cd:b0:56:c7:33:63:93:a5:83:d0:35:34:
ca:1a:fd:8a:ed:d4:9d:7f:35:c7:0b:f8:ca:ae:55:
a9:0e:b2:37:54:db:7f:f3:ff:ed:88:cd:6d:bd:e1:
96:82:c8:e4:73:c7:52:e0:4f:ec:71:65:cc:90:02:
73:0c:33:8d:1b:c9:8d:c5:71:21:66:16:85:9a:36:
03:ff:39:95:ca:f0:5b:2b:93:d8:d5:16:52:cc:2b:
bc:4e:43:1e:c1:8a:b1:19:b6:c4:33:ab:3e:f0:91:
29:f5:8e:4e:fc:c9:94:0f:4b:ea:3b:b6:0a:87:99:
3e:10:04:e5:ad:be:69:11:47:1b:44:ee:47:f4:8d:
6a:87:ee:ba:70:ed:62:b1:c6:7b:e6:3b:6a:c3:5a:
fd:b9:e6:11:34:20:4c:cc:35:3e:8c:8f:54:98:83:
9d:22:08:a2:c5:94:58:ac:33:c9:6c:7e:43:06:ff:
f9:88:b0:bf:1e:17:fc:9b:78:b9:4f:01:3e:31:ce:
cc:5a:7d:ec:87:0d:15:88:9c:a9:bd:9d:42:3e:36:
11:6e:d0:11:9f:54:20:6a:46:81:c1:c3:9c:e6:6d:
66:5f:6f:97:a7:39:1f:d5:91:0c:74:c9:0c:35:4e:
0f:76:92:67:30:94:2b:9f:3b:cc:5b:2d:17:f6:91:
61:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:94:78:0F:FB:B0:6B:7B:57:F0:21:4E:84:55:2B:96:4C:50:41:D6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.214.224.0/21
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9180
Signature Algorithm: sha256WithRSAEncryption
84:e8:74:27:e5:f6:cb:27:30:bc:68:1c:bd:59:cb:af:d1:53:
9f:d4:74:c5:af:50:4a:4a:c0:b5:b7:7c:a4:4e:21:29:1d:6a:
d4:21:f9:3d:d0:27:27:63:7c:19:87:43:6a:cf:c7:de:77:d4:
8b:71:05:32:f7:81:85:1f:22:46:e7:84:5f:4f:05:3b:86:41:
65:08:e8:93:2b:0b:30:50:0a:4e:ef:f9:32:19:0c:19:94:53:
db:b9:43:83:d1:cf:01:95:bd:8e:fa:f7:20:0e:4a:5e:b7:76:
ae:60:14:b5:47:d9:23:31:ea:ea:65:15:5d:dc:30:10:d1:4f:
47:5a:fb:3b:39:09:2d:20:f5:f2:f3:ab:4b:d5:e5:3d:0c:ea:
db:d4:04:f8:b5:b9:2a:5a:c6:39:c7:03:54:d7:cd:e7:45:5f:
0c:3a:8a:2a:40:16:1c:ff:ab:08:d1:cd:cc:c9:a9:aa:16:29:
98:e6:7e:56:d0:ac:23:a2:a3:a4:c5:d8:32:52:ba:4a:43:9c:
ef:39:bb:13:88:d2:26:1b:51:46:17:bd:42:5f:4a:75:00:4f:
a0:aa:f2:49:9c:93:2e:75:47:56:ca:04:0a:f1:b3:07:18:c7:
65:ba:11:5b:6f:ae:20:e5:b9:67:00:01:85:62:cd:80:05:2c:
b1:46:8f:2d
-----BEGIN CERTIFICATE-----
MIIFkzCCBHugAwIBAgISAYzIb2hOVCGoEMLvdQizqITcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjQwMTAyMDQyOTUzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMDk0NzgwZmZiYjA2YjdiNTdmMDIxNGU4NDU1MmI5NjRjNTA0MWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6bNsFbHM2OTpYPQNTTKGv2K7dSd
fzXHC/jKrlWpDrI3VNt/8//tiM1tveGWgsjkc8dS4E/scWXMkAJzDDONG8mNxXEh
ZhaFmjYD/zmVyvBbK5PY1RZSzCu8TkMewYqxGbbEM6s+8JEp9Y5O/MmUD0vqO7YK
h5k+EATlrb5pEUcbRO5H9I1qh+66cO1iscZ75jtqw1r9ueYRNCBMzDU+jI9UmIOd
IgiixZRYrDPJbH5DBv/5iLC/Hhf8m3i5TwE+Mc7MWn3shw0ViJypvZ1CPjYRbtAR
n1QgakaBwcOc5m1mX2+Xpzkf1ZEMdMkMNU4PdpJnMJQrnzvMWy0X9pFhTQIDAQAB
o4ICnzCCApswHQYDVR0OBBYEFLCUeA/7sGt7V/AhToRVK5ZMUEHWMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzNlLzY2ODNj
YS1hNjg4LTQxNDEtYWQ0MS04YWRmMGRhMjI1NDUvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvM2UvNjY4M2Nh
LWE2ODgtNDE0MS1hZDQxLThhZGYwZGEyMjU0NS8xL3NKUjREX3V3YTN0WDhDRk9o
RlVybGt4UVFkWS5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQDw9bgMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQC
AiPcMA0GCSqGSIb3DQEBCwUAA4IBAQCE6HQn5fbLJzC8aBy9Wcuv0VOf1HTFr1BK
SsC1t3ykTiEpHWrUIfk90CcnY3wZh0Nqz8fed9SLcQUy94GFHyJG54RfTwU7hkFl
COiTKwswUApO7/kyGQwZlFPbuUOD0c8Blb2O+vcgDkpet3auYBS1R9kjMerqZRVd
3DAQ0U9HWvs7OQktIPXy86tL1eU9DOrb1AT4tbkqWsY5xwNU183nRV8MOooqQBYc
/6sI0c3MyamqFimY5n5W0KwjoqOkxdgyUrpKQ5zvObsTiNImG1FGF71CX0p1AE+g
qvJJnJMudUdWygQK8bMHGMdluhFbb64g5blnAAGFYs2ABSyxRo8t
-----END CERTIFICATE-----
Generated at Fri May 3 14:16:22 2024 by rpki-client on console-ams.rpki-client.org